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(57) Abstract 

This invention relates to metered usage, and pre- 
vention of piracy, of computer software and other in- 
tellectual property existing in electronic digital for- 
mat. The end result of the invention enables soft- 
ware-on-demand and software subscription services by 
employing a transformation filter (104) to perpetually 
regulate, meter, and charge for the usage of software 
products. The apparatus is implemented as a virtually 
integral part of tiie operating system that monitors and 
"filter" all read, write, and open/execute acccess to and 
from the I/O devices (106). As the protected material 
is being accessed, the transformation filter (104) posi- 
tions itself in the path required for loading the mate- 
rial through the file system and application layers. The 
material enters the transformation filter (104) in its en- 
crypted state and is decrypted in real-time as it goes 
through. The material is then handed over to the op- 
erating system components (107/108) to fulfill the user 
access requests. 
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Method and System of Dynamic Transf ormatiloii of 
Encrypted Material 

Background Of The Invention 

5 

1. The Technical Field 

This invention relates to metered usage of computer 
software and other intellectual property existing in 
10 electronic digital format. The end result of the invention 
enables services such as software-on-demand and software 
subscription. This invention can also be applied to the 
prevention of piracy of computer software and other 
intellectual property. 

2. Description Of The Prior Art 

In the ciirrent consumer market, computer software and 
other intellectual property existing in digital format are 

20 primarily marketed the same as other hard goods commodities. 
However, while video tapes and other hard goods are rented 
routinely, software products typically are still available 
only on a purchase basis. As a result, at least two useful 
services generally are not available: software-on-demand and 

25 software subscription. Software-on-demand is a service that 
would allow consumers to pay for software products on a per- 
use basis. Software subscription is a service that would 
make one or more software products available to consumers on 
a periodic subscription basis such as once a month. 

30 Despite the obvious benefits of these services, the 

inherent nature of software products has posed significant 
technical challenges to enabling technology providers. In 
order to successfully support these services, the enabling 
technology should meet the following criteria: 

35 

I. Security. Software product made available in software- 
on-demand and subscription format should be protected 
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and regulated in a totally secure manner ♦ The enabling 
technology must defend the software from the most 
skilled and determined hackers. In particular, at no 
time should the software in its original state be 
5 present on an intermediate storage medium, because this 

simply opens the door for skilled system level hackers* 
There is also the possibility that utilities would 
become available that would make such an intermediate 
storage medium accessible to the public. 

10 II. Noji- Jntrusl veness . The enabling technology should not 

require modification of source code in order to protect 
and meter usage. In contrast, intrusive technology 
embeds itself in the source code of software products 
and requires recompilation of the software. This effort 

15 introduces significant overhead in the protection 

process in terms of extra coding and testing resources, 
and is highly error prone* 

III. Minimal System Overhead • The enabling technology should 
not impose significant overhead while protecting, 

20 launching, and metering usage of the software product. 

Typical overhead introduced by enabling technology 
includes the need for extra RAM and hard disk storage 
space, the launching of the protecting process before 
decrypting protected software, and competition for other 

25 system resources, such as the CPU, while monitoring 

usage • 

IV. Jjnmunlty From System Clock Resets By altering a 
computer system's clock setting, users of software 
products can significantly prolong their allowed usage 

30 period and consequently compromise the effectiveness of 

software-on-demand and software subscription services. 
The enabling technology should be able to detect and 
take counter-measure actions against system clock 
resets. 

35 V. Perpetual Protection And Metering. Once a software 
publisher puts his software under the protection and 
control of the enabling technology, it should be 
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perpetually protected and controlled. Subsequent copies 
and reinstallation should not disable the protection and 
control. ^ 

VI. User Friendliness. The enabling technology should not 
5 alter a computer user's environment in a way that causes 

changes in system settings that are noticeable to the 
user. The user interface should be totally intuitive 
and easy to use. 

10 Available prior art protection techniques are based on 

"wrapper" and "redirection" technologies. A "wrapper" often 
takes the form of a operating system shell program or an 
altered start-up code section of the protected software. Its 
function is to shield direct access to the protected 
15 software. When the protected software is accessed by users, 
the "wrapper" will be executed first. The protected software 
in its encrypted state will be then decrypted and restored on 
a temporary storage medium in its original state. The 
"wrapper" will then redirect the access to the restored 
20 software on the temporary storage medium. 

A system developed by TestDrive Corporation in Santa 
Clara, Calif., offers try-bef ore-buy software evaluation 
services. This system converts an original version of 
software to a disabled version that may be used for a limited 
25 trial or evaluation period. If purchase of software is 
desired, an unlock code may be purchased that converts the 
software to its original state. In a preferried embodiment, 
this prior art system is applied to chosen material, such as 
a computer program, and a portion of the material is 
30 separated from the original material. In this way, a 

denatured version of the original material that includes the 
separated portion of the material and the residual portion of 
the material is produced. During the trial period, the 
denatured version of the material is placed into a temporary 
35 storage medium but only the separated portion is readily 
accessed by a system user. Alternatively, the separated 
portion of the material may be replaced with a modified 
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portion, for example, a counter may be included to limit the 
number of times the material may be accessed, or interfering 
material may be added to the original material, such as beeps 
in an audio signal, or a mask in a visual signal. 

5 

Several drawbacks in these "wrapper" and "redirection" 
technology based systems are obvious. 
I. Security flaw. Since "wrapper" and "redirection" 
technology requires a temporary storage medixam to 

10 physically host either all the restored software or the 

residual portion of the software in its original state, 
the very existence of the material in its original state 
accessible by a system user makes the system vulnerable 
to hacker attacks. It is possible for an operating 

15 system expert to gain access to the material in its 

original state and redistribute a pirated version of the 
material. A utility software program could also 
possibly be developed to perform this act of piracy 
repeatedly and can be made available in the public 

20 domain to further damage the effectiveness of the 

enabled services. While wrapper and redirection 
technologies can protect software from novice attacks, 
they are not highly secure against experts. 

25 II. System overhead. Iiaunching the "wrapper" program, 

physically storing the restored software in its original 
state, and creating and administrating the temporary 
storage medium all impose delay before launching the 
user desired software product. These activities also 

30 compete for other system resources with other processes 

run by the operating system. 

III. Space overhead. Storage of the restored software 

product in its original state in Random Access Memory 
35 (RAM) will require greater than 100% more RAM space than 

the protected software normally requires. In a multiple 
process operating system, where multiple protected 
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software can be executed simultaneously, this overhead 
requirement can be multiplied and significantly impact 
the system's performance. 

5 IV. Unwelcome Nuisance. The creation of a temporary storage 
medium in a computer system, such as a virtual device, 
is an artifact normally xinwelcome and foreign to 
computer system users. Therefore, the user will 
eventually want to purchase the original material in its 
10 entirety to eliminate the nuisance and artifacts 

generated by wrapper and redirection technologies. 
Thus, these technologies do not lend themselves to 
providing perpetual usage metering and protection 
services . 

15 

Currently there is no known highly secure method that 
provides real time decryption of encrypted software or other 
electronic material without redirecting and storing the 
decrypted material on a temporary medium. 

20 

summary Of The invention 

The present invention provides a method and system that 
enables software-on-demand and software subscription services 

25 based on a dynamic transformation filter technology. The 
invention is also useful in the distribution of other 
electronic materials. The apparatus utilized in this 
invention does not create any intermediate storage of 
decrypted material that is under the protection of this 

30 technology. Instead, the apparatus is implemented as a 

virtually integral part of the operating system that monitors 
and "filters" all read, write, and open/execute access to and 
from the I/O devices, such as a hard drive. As the protected 
material is being accessed for read, write or open/execute, 

35 the transformation filter positions itself in the critical 
path which is required for loading the material through the 
low level file system layer to the high level application 
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layer. The material enters the transformation filter in its 
encrypted state. The transformation filter decrypts the 
material as it goes through, and hands over the material in 
its original state to the upper level operating system 
5 component to fulfill the access requests. Because the need 
for intermediate storage is eliminated, the decrypted 
material in its original state is only visible to integral 
parts of the operating system components and not to other 
system users. As a result, security is significantly 

10 improved over prior art systems. 

The transformation filter is formed by converting a 
programmable service that is provided by the operating system 
for a totally different purpose into a "filtering" security 
and regulating system. Preferably, in the case of Windows 

15 95™ software, this programmable service is a virtual device 
driver; and in the case of Windows NT™ it is a kernel driver 
model. 

The present invention can operate with material that is 
not intrusively embedded inside the protected material. It 

20 provides an utility that encrypts any material with a few 
easy to follow steps. The invention adopts standard data 
encryption mechanisms made available by the U.S. government 
and commercial companies. However, the apparatus in this 
invention provides enhanced key management capabilities to 

25 further ensure security of the encrypted material. All 
material installed on the consumer's PC goes through two 
encryption processes. The second encryption process requires 
a dynamically unique key generated from the computer user's 
unique ID. The dynamic generation of the key ensures that no 

30 unlocking key can be obtained directly from files stored on 
the hard disk. 

The present invention make it possible for the 
transformation filter to perpetually regulate, meter, and 
charge for the usage of software products and other 

35 intellectual property existing in digital format. Such 

material can be ordered on-demand multiple times and can also 
be available on a subscription basis. Copying of the 
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installed material to other computers will only produce an 
encrypted version of the material. However, a permanent copy 
of the decrypted material can be generated at the discretion 
of its publisher. 
5 The invention provides components of the system that 

allows users of such material to connect via a modem or 
existing private network, and Internet connection to a 
clearing house server. The clearing house server will in 
turn generate an authorization code for enabling metered 
10 usage of the material upon receiving an order and a charge 
card number. Currently acceptable charge cards include 
regular credit cards and debit cards. Future payment methods 
viii illustratively include smart cards and digital cash. 
These components of the system will also be able to process 
15 customer returns and exchanges. 

The present invention is able to operate with material 
distributed via all possible channels, such as electronic 
material distribution over the Internet, CD-ROMs distributed 
at physical store fronts, DVDs, VCDs, cable modem, and other 
20 broadcasting channels. 

The present invention also operates in an network 
environment where access to material over a network file 
system is equally regulated and metered by the system. 

25 Brief Description Of The Drawings 

These and other objects, features and advantages of the 
invention will be more readily apparent from the following 
detailed description of the invention in which: 

30 Figure 1 is a high level architecture diagram depicting 

components of the system, their relative positions and 
interrelationships and the direction of data flow; 

Figure 2 depicts the process of encrypting and packaging 
of original material into a protected state; 

35 Figure 3 depicts the process of installing the protected 

product onto a user»s computer, including the generation of a 
unique ID and a second encryption with a user unique key; and 
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Figure 4 is a flowchart depicting the internal process 
flow of the transformation filter/ 

Detailed Description Of The Invention 

5 

The current invention is a method and apparatus that is 
integrated into the internals of an operating system, such as 
Microsoft Windows 95 or Window NT. This method and apparatus 
enables dynamic decryption of encrypted material in real time 
10 without redirection to a temporary storage medium. 

Consequently the invention allows software products and other 
materials in electronic format to be protected through 
encryption and to be made available for regulated and metered 
usage. 

15 In the preferred embodiment of the present invention/ a 

transformation filter is implemented as a kernel level 
program operating in a multi-process operating system 
environment; and the encrypted material is application 
software. However, the invention may also be applied to 

20 other contexts such as the distribution of audio or visual 
materials in encrypted form. 

Figure 1 is a high level architecture diagram depicting 
the position and function of the transformation filter within 
the operating system. 

25 High level application programs, including local 

applications and network applications 101, 102, 103, request 
access to software materials residing on system I/O devices 
106 to perform read, write, and open/execute activities. 
These requests must be submitted to the operating system 

30 components like an OS file system manager 107 or a network 
service provider 108, and be relayed to a file system driver 
layer or a network file system driver layer 105 which is also 
on the kernel level. In accordance with the invention, a 
transformation filter 104 is positioned between the 

35 applications 101, 102, 103 and the file system driver layer 
105. Illustratively, in the context of Windows 95"" Software, 
the transformation filter is implemented as a virtual device 
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driver; and in the case of Windows NT* it is implemented as a 
kernel driver model. 

If access requests coming from local and/or network 
applications to file system drivers are considered to be 
5 going "downstream", then all data being read from I/O devices 
to upper layers of the operating system are considered to be 
going "upstream". Both downstream (from application down to 
file system) and upstream (from file system to application) 
data must go through a particular path which is referred to 

10 as the critical path in this document. Transformation filter 
104 is in the critical path. 

Whenever data passes through the transformation filter 
in an upstream direction, the transformation filter performs 
the necessary transformation that converts the encrypted 

15 software into its original state. The software that has been 
transferred to its original state is then handed over to 
upper layers of the operating system. If the request is from 
an application, e.g., an image viewer to open a file for 
display, the transformed software material will eventually be 

20 handed over to the application. From the requesting 

application's perspective, opening this encrypted software 
material is no different from opening any other original 
software material. The transformation process is totally 
transparent to the requesting application. If the request is 

25 to execute the file (e.g., double mouse clicking on the file) 
and the original software material is an executable program, 
the transformed software will be handed over to the operating 
system's loader to execute in memory. This process is 
considered "filtering" because encrypted software moving 

30 upstream goes into the apparatus and comes out in its 

decrypted state as if it went through a filtering device. No 
intermediate storage of the decrypted software is ever 
exposed to system users during the whole "filtering" process. 
All handing-over and decrypting processes take place inside 
35 the operating system as internal activities in a highly 
secure fashion. 
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Transformation filter 104 is implemented as if it were 
an integral part of the operating system. Extra security 
measures are built into transformation filter 104 so that it 
not only is capable of "filtering" upstream and downstream 
5 data, but also monitors hacking activities within the 
operating system and takes countermeasures to prevent any 
security breaches from taking place. 

Figure 2 is a block diagram depicting the process of 
encrypting the original software material into its pre- 
10 installed encrypted stage. As shown in Figure 2, original 
software material Mo 201 is encrypted by application of a 
transformation function /g 202 in an encryption process Pe 
203. The encryption process preferably is a standard 
encryption process such as DES or RSA. The result of this 
15 encryption process is encrypted software Mg 204, which may be 
transmitted securely over various distribution channels, such 
as CD-ROMs, the Internet, and others. 

During a second process Pb 209, four other components 
that support successful regulation and metering of the 
20 software's usage are added to Me 204. These components are a 
license manager 205, a client application 206, a 
transformation filter 207, and a product specific signature 
data 208. License manager 205 is a software program that is 
responsible for maintaining a^Iicehs^databas including data 
25 on usage of the encrypted software, interfacing with users of 
the encrypted software material Mgr and terminating usage of 
the encrypted software material upon expiration of an 
authorized usage period. Client applicatj-on 206 is a 
software program that is used to request from a clearinghouse 
30 server authorization to use the encrypted software material 
Me, and to receive from the clearinghouse server an 
appropriate authorization code. This activity may also 
involve some form of electronic payment, such as provision of 
a credit or debit card number. In addition, the client 
35 application may also include the capability of obtaining 
pricing, promotion and upgrade information and downloading 
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additional software. Transformation filter 207 is the 
software which controls access to the encrypted software 
material Mg. Further details of this software are described 
in conjunction with Figures 1 and 4* Product specific 
5 signature data 208 is a code unique to the particular 
encrypted software material Mg. 

The output of process 209 is a single output file M, 
210, which is the pre- installation encrypted software 
material and comprises all the input components 204, 205, 
10 206, 207, 208. Process 209 preferably just combines 

components 204, 205, 206, 207, 208 into a single software 
product. Alternatively, process 209 could also involve an 
additional encryption process. 

In the preferred embodiment of the invention, output 
15 file Mi takes on the name, icon and other properties of the 
original software material. Therefore, from an external 
point of view, this file appears to be identical to the 
original software. This embodiment is primarily for the 
purpose of eliminating extra steps for software publishers in 
20 packaging their software products. 

Subsequently, software publishers can use their favorite 
installation packaging utility, such as InstallShield™, to 
put their software into a normal installation package as if 
the encryption processes of Figure 2 had never taken place. 
25 Figure 3 is a block diagram depicting the process of 

installing encrypted software material onto a user's PC. In 
a preferred embodiment, output file M, launches its own 
installation process 302 after a user goes through normal 
procedures for installing the software just as if the 
30 software had never been encrypted. Installation process P, 
302 spawns off the key components of the pre-installation 
software material M, 210/301. First, a license manager 303, a 
client application 304 and a transformation filter 305 are 
extracted and installed in proper hidden places in the 
35 system. Product specific signature data 306 and the 
encrypted software Mg are also obtained. 
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Simultaneously, user profile data and operating system 
specific information, represented as Dp 307 is transformed by 
a transformation function fx 308 in process Pu 312 to generate 
a unique ID 313 for the customer. Any number of conventional 
5 techniques can be used in process 312 to generate unic[ue ID 
313* Advantageously, we prefer to use a time stcunp with a 
precision measured in milliseconds in generating the unique 
ID because the probability that two users will install their 
software at the same millisecond is virtually zero. Unique 
10 ID 313 is subsequently used in all phases and components of 
the system. 

Product specific signature data 306, unique ID 313 and 
the encrypted software are supplied to a process P^s 309. 
Process Pes uses the inverse of the transformation function 

15 to decrypt the software material and thereby restore the 
original material Mq* Such decryption processes are well 
known. Then, it immediately re-encrypts Mq with a unique 
encryption key based on the unique ID 313 and the product 
specific signature data 306. Again, standard encryption 

20 processes such as DES or RSA may be used. The result is a 
uniquely encrypted software material My 310. The software 
material Mu is then installed above driver layer 105 (See 
Pig. 1) . 

In the preferred embodiment, the invention never stores 
25 the unique encryption key used for the generation of Mu* 
Whenever necessary, this unique key can be dynamically 
regenerated using the same inputs (the unique ID and the 
product specific signature data) and key generation process. 
This key management strategy makes it extremely difficult to 
compromise the encrypted software material. The uniqueness 
of the key also assures that no identical encrypted software 
material exists on any two user's computers once the software 
is installed. 

At the end of installation, a license database DL 311 is 
^5 generated that keeps all license information, a usage 
counter, and other important information to successfully 
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implement a usage regulation and metering process described 
below in conjunction with Figure 4. The license database 
identifies the encrypted software as being "registered", that 
is, being subject to the system of the present invention- 
5 The database is also stored in the computer system. 

Referring to Figure 1, transformation filter 104 is 
installed in the computer system so that it intercepts all 
requests to access software files resident on I/O devices 
106. In the Windows 95" operating system this is accomplished 
10 by installing the transformation filter as a virtual device 
driver. In the Windows NT" operating system this is 
accomplished by installing the transformation filter as a 
kernel driver model. 

User activities such as read, write, execute the 
15 software or open software material for viewing are processed 
by the operating system. A higher level operating system 
process (e.g., a local or network application 101, 102, 103 
of Figure 1) is responsible for passing a request for such 
activities downstream to driver layer 105 through 
20 transformation filter 104. 

Figure 4 illustrates the detailed internal process flow 
of the transformation filter. As indicated by box 416, the 
transformation filter continuously monitors the operating 
system for all I/O requests. When such a request reaches the 
25 transformation filter, it initiates the get software + 

license info process 403. This process obtains the license 
information (if any) for the requested software including the 
latest status on the software's usage, license, authorization 
code, expiration date, product specific signature data 
30 208/306, along with other pertinent information. 

Subsequently, two validation tests are applied: a test if 
the software is registered (step 406) and a test if the 
license is valid (step 407). If the requested software was 
not registered, the transformation filter simply transfers 
35 control back to the operating system's requesting process at 
step 413 without taking any further actions. If the software 
is registered, the transformation filter checks at step 407 
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Whether there is a valid license for it. In case there is no 
valid license, a client application is launched at step 414 
to prompt the user to order more usage or purchase the 
software • 

5 The order entry process is handled by the client 

application component of the system. The client application 
connects the user's computer to a clearinghouse server via a 
modem or existing Internet connections. The clearinghouse 
server, upon receiving a valid credit card or debit card 

10 number, in turn generates an authorization code to activate 
legitimate usage of the registered software. 

If a valid license for the software is present and the 
execution is within the authorized usage period, the 
transformation filter starts a security monitor process 408 

15 to perform a scan of any third party processes that might be 
attempting to hijack data going out of the transformation 
filter after being decrypted. In case that suspicious 
activity is present in the operating system, the 
transformation filter takes countermeasures to eliminate the 

20 potential threat. 

Next, the unique key to be used to decrypt the encrypted 
software is generated in key generation process 409. This 
key is generated from the unique ID 313 and the product 
specific signature data 306. Using the generated decryption 

25 key and the inverse of encryption process 309, the 

transformation filter then decrypts in real-time all the 
encrypted portion of the software in the decrypting 
transformation process 410. The decrypted software in its 
original state is then handed-over at step 413 to the 

30 requesting process. The operating system may now 

successfully process the execution or feed the decrypted 
software material to an application that requested access. 

Once the decrypted software is handed-over to the 
requesting process, the transformation filter starts a usage 

35 metering counter at step 411. While the usage counter runs, 
the transformation filter continually tests at step 412 the 
amount of usage for a violation of the license terms or 
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expiration of the license. In case there is a violation of 
the terms of the license for the software or the license has 
expired, the transformation filter starts a process at step 
415 to launch the license manager. The license manager is 
5 responsible for properly maintaining and updating the license 
database, and interacting with the user by prompting him with 
various messages and taking in the user's feedback. Whenever 
necessary, the license manager is responsible for terminating 
usage of the registered software material after given the 
10 user warnings and a reasonable amount of time to respond. 
The license manager may transfer control to the client 
application to prompt the user to order more usage when the 
license expires. 

The present invention enables the whole process of 
15 encrypting, registering, ordering, activating, decrypting, 
regulating and metering the usage of software materials. 
Business services that will benefit consumers, including but 
not limited to, software-on-demand, software rental, software 
subscription, try-bef ore-buy, can be adequately supported by 
20 the method and system of this invention. 

Two examples of the application of the invention in the 
provision of software are software-on-demand and software 
subscription services. 

The essence of software-on-demand services is to make 
25 software available at the consumer's finger tip whenever the 
consumer desires to use the software. The software material 
made available through this service can be application 
software, such as accounting software, games, education and 
entertainment software, CAD software, etc. The software 
30 material can also be any electronically stored material such 
as audio, video, other forms of multimedia content, or it 
simply takes the form of plain binary or text file. This 
service is supported by the invention in the following way: 
1. A publisher uses the invention to encrypt his software 
35 materials following the steps of Figure 1. The encrypted 
software material becomes a registered software known to a 
clearinghouse server. 
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2. The software material is then packaged using any 
commercially available installation packaging software, for 
example InstallShield. Multiple programs or other software 
material from one or several publishers may be combined in 

5 one software package. 

3. The software material is distributed to users through 
various channels, such as the Internet/WWW, CD-ROM, DVD, or 
VCD. 

4. The user choose from an online based electronic catalog 
10 listing all available material in the software package. He 

or she decides to install one or more software programs or 
other material onto his or her computer following the steps 
of Figure 2. 

5. The user then decides to use one of the software 
15 programs or other material. 

6 . The user issues an execute command or invokes an 
application to access the software program or other material. 
7 • The user is prompted via the client application to pay 
for such usage with a credit card or other type debit card 

20 number. 

8. The user is connected to a clearinghouse server facility 
via modem or over Internet connection. If there is a 
firewall (for corporate users) , the invention will operate 
with the procedure to pass through the authorization process 

25 of the firewall. 

9. The user reviews pricing information retrieved from the 
clearinghouse server by the client application. 

10. The user confirms the order. 

11. The clearinghouse server issues an authorization code. 
30 12. The authorization code activates the desired software 

material. The usage counter is updated to record this 
ordering session. 

13. The user reissues the execution or access command. 

14. The transformation filter dynamically perform the 
35 necessary transformation to enable proper usage of the 

software material. 
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15. Usage is metered and regulated by the license manager 
application. 

Software subscription services follow the similar steps 
5 of software-on-demand services, except the payment for the 
services is on a monthly basis. Users also normally have the 
option of using multiple products every month. 

Another example of the application of the invention is 
in the distribution of audio/ visual or textual material. 
XO Such material may be encrypted, prepared and distributed in 
essentially the same fashion as application software. The 
user then selects the material he wants to see or hear and 
obtains it in a fashion similar to the way he obtains the 
software except that in this case the visual material is 
15 displayed and the audio material is used to drive a speaker 
system. 
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What Is claimed: 

1. A method of operating a computer on which encrypted 
material has been Installed comprising the steps of: 

monitoring all requests for access to the encrypted 
5 material; 

upon receiving a request for access to the 
encrypted material, obtaining the material; 

determining if a license exists to use the 
material; 

10 if a license exists, decoding the encrypted 

material in real-time; 

monitoring how much the decoded material is used; 

and 

determining if the usage of the material complies 
15 with the license. 

2. The method of claim 1 wherein the encrypted 
material is encrypted using a first key that is unique to a 
user and a second key that is unique to the material that is 

20 encrypted. 

3. The method of claim 2 wherein the first key 
includes a time stamp. 

25 4. The method of claim 2 wherein the time stamp has a 

precision measured in milliseconds. 

5. The method of claim 2 further comprising the step 
of generating from the first key and the second key a third 
30 key for use in decoding the encrypted material. 



6. The method of claim 1 wherein the encrypted 
material is installed in the computer by decrypting a first 
version of the material to produce an unencrypted version and 
35 then re-encrypting the material using a first key that is 
unique to a user and a second key that is unique to the 
material that is encrypted. 
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7. The method of claim 1 further comprising the step 
of obtaining a license to use the material if it is found 
that a license does not exist. 

5 8. The method of claim 1 further comprising the step 

of performing a security check of the computer before 
decrypting the encrypted material. 

9. The method of claim 1 wherein the encrypted 
10 material is a computer program. 

10. The method of claim 1 wherein a software package is 
installed on the computer, said software package comprising 
an encrypted portion, a unique code, and decrypting software 

15 for decrypting the encrypted portion, said method comprising 
the steps of: 

separating from the software package the encrypted 
portion, the unique code and the decryption software; 
storing said decryption software so that it is 
20 invoked whenever an attempt is made to access the 

encrypted portion; 

generating a unique ID from profile data and an 
encryption algorithm; 

decrypting the encrypted portion of the software to 
25 produce an unencrypted portion; 

encrypting the unencrypted portion using the unic[ue 
ID and the unique code to produce said encrypted 
software; and 

storing the encrypted software in said computer. 

30 

11. The method of claim 10 wherein the unique ID 
includes a time stamp. 

12. The method of claim 11 wherein the time stamp has a 
35 precision measured in milliseconds. 
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13. A method for installing software on a computer, 
said software comprising an encrypted portion, a unique code, 
and decrypting software for decrypting the encrypted portion, 
said method comprising the steps of: 
5 separating from the software the encrypted portion, 

the unique code and the decryption software; 

storing said decryption software so that it is 
invoked whenever an attempt is made to access the 
encrypted portion; 
10 generating a unique ID from profile data and an 

encryption algorithm; 

decrypting the encrypted portion of the software to 
produce an unencrypted portion; 

encrypting the unencrypted portion using the unique 
15 ID and the unique ID code to produce a second encrypted 

portion; 

storing the second encrypted portion in said 
computer • 

20 14, Apparatus for operating a computer on which 

encrypted material has been stored comprising: 

means for monitoring all requests for access to the 
encrypted material; 

means for obtaining the encrypted material upon 
25 receiving a request for access to said material; 

means for determining if a license exists to use 
the material; 

means for decoding the encrypted material in real- 
time if a license exists; 
30 means for monitoring how much the encrypted 

material is used; and 

means for determining if the usage of the material 
complies with the license. 

35 15. The apparatus of claim 14 wherein the encrypted 

material is a computer program. 
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16. The apparatus of claim 14 as implemented in a 
virtual device driver in a Windows 95™ operating system. 

17. The apparatus of claim 14 as implemented in a 
5 kernel model driver in a Windows NT™ operating system. 
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